Evilmartians Imgproxy
2 CVEs affecting Evilmartians Imgproxy. Latest disclosed: 2023-05-08. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1496 | Medium | 5.4 | 2023-03-19 | Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. |
CVE-2023-30019 | Medium | 5.3 | 2023-05-08 | imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter. |